A study of access control requirements for healthcare systems based on audit trails from access logs

Proceedings - Annual Computer Security Applications Conference, ACSAC

Volumn , Issue , 2006, Pages 175-183

  Røstad, Lillian ^a   Edsberg, Ole ^a  

^a NORWEGIAN UNIVERSITY OF SCIENCE AND TECHNOLOGY   (Norway)

Author keywords

[No Author keywords available]

Indexed keywords

DATA PRIVACY; HEALTH CARE; HOSPITAL DATA PROCESSING; INFORMATION RETRIEVAL;

ACCESS LOGS; AUDIT TRAILS; EXCEPTION-BASED ACCESS;

ACCESS CONTROL;

EID: 39049126192     PISSN: 10639527     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1109/ACSAC.2006.8     Document Type: Conference Paper

References (12)

1. W. Tolone, G.-J. Ahn, T. Pai, and S.-P. Hong. Access control in collaborative systems. ACM Comput. Surv., 37(1):29-41,2005.
2. D. F. Ferraiolo, D. R. Kuhn, and R. Chandramouli. Role-Based Access Control. Computer Security Series. Artech House Publishers, Boston, 1 edition, 2003. ISBN: 1580533701.
3. M. Evered and S. Bögeholz. A case study in access control requirements for a Health Information System. Proceedings of the second workshop on Australasian information security, Data Mining and WebIntelligence, and Software Internationalisation - Volume 32. Australian Computer Society, Inc., Dunedin, New Zealand, 2004.
4. K. Beznosov. Requirements for access control: US Healthcare domain. Proceedings of the third ACM workshop on Role-based access control. ACM Press, Fairfax, Virginia, United States, 1998. ISBN: 1581131135.
5. R. J. Anderson. A security policy model for clinical information systems. Proceedings of the 1996 IEEE Symposium on Security and Privacy. IEEE Computer Society, 1996.
6. B. Blobel. Authorisation and access control for electronic health record systems. International Journal of Medical Informatics, 73(3):251-257, 2004. ISSN: 1386-5056.
7. St. Olavs Hospital - medical ward. URL: http://www.stolav.no/stolav/ Virksomhet/behandling/medisin/index.htm. Last accessed: May 28th 2006.
8. D. Povey. Optimistic security: a new access control paradigm. Proceedings of the 1999 workshop on New security paradigms. ACM Press, Caledon Hills, Ontario, Canada, 2000. ISBN: 1581131496.
9. L. Zhang, G.-J. Ahn, and B.-T. Chu. A role-based delegation framework for healthcare information systems. Proceedings of the seventh ACM symposium on Access control models and technologies. ACM Press, Monterey, California, USA, 2002.
10. S. Na and S. Cheon. Role delegation in role-based access control. Proceedings of the fifth ACM workshop on Role-based access control. ACM Press, Berlin, Germany, 2000.
11. E. Barka and R. Sandhu. Framework for role-based delegation models. In Annual Computer Security Applications Conference (ACSAC), pages 168-176, 2000.
12. R. K. Thomas. Team-based access control (TMAC): a primitive for applying role-based access controls in collaborative environments. Proceedings of the second ACM workshop on Role-based access control. ACM Press, Fairfax, Virginia, United States, 1997.